SYZFAIL: SIGSEGV pc-offset:0xffffffff217d34d1 pc:0xdeadbeef addr:0x0 code=65537 (errno 9: Bad file descriptor) pid 941 (syz-executor), tap1: tun/tap protocol violation, non-controlling process closed last. ifaddr cache = 0xfffffe0058646a80 is deleted if_delmulti_locked: detaching ifnet instance 0xfffffe00585aa000 tap1: link state changed to DOWN if_delmulti_locked: detaching ifnet instance 0xfffffe00585aa000 if_delmulti_locked: detaching ifnet instance 0xfffffe00585aa000 Connection to 10.128.1.128 closed by remote host. pid 758 (sshd), jid 0, uid 0: exited on signal 11 (no core dump - sugid process denied by kern.sugid_coredump) pid 949 (syz-executor), tap0: tun/tap protocol violation, non-controlling process closed last. ifaddr cache = 0xfffffe006dfc4000 is deleted if_delmulti_locked: detaching ifnet instance 0xfffffe00585aa800 tap0: link state changed to DOWN if_delmulti_locked: detaching ifnet instance 0xfffffe00585aa800 if_delmulti_locked: detaching ifnet instance 0xfffffe00585aa800 Expensive callout(9) function: 0xffffffff81add660(0) 0.011699341 s pid 933 (getty), jid 0, uid 0: exited on signal 11 (core dumped) FreeBSD/amd64 (ci-freebsd-main-3.us-central1-b.c.syzkaller.internal) (ttyu0) login: pid 955 (syz-executor), tap3: tun/tap protocol violation, non-controlling process closed last. ifaddr cache = 0xfffffe0058646780 is deleted if_delmulti_locked: detaching ifnet instance 0xfffffe00585a9800 if_delmulti_locked: detaching ifnet instance 0xfffffe00585a9800 if_delmulti_locked: detaching ifnet instance 0xfffffe00585a9800 tap3: link state changed to DOWN pid 956 (syz-executor), jid 0, uid 0: exited on signal 11 (core dumped) pid 954 (syz-executor), tap2: tun/tap protocol violation, non-controlling process closed last. ifaddr cache = 0xfffffe0058646480 is deleted if_delmulti_locked: detaching ifnet instance 0xfffffe00077f6800 tap2: link state changed to DOWN if_delmulti_locked: detaching ifnet instance 0xfffffe00077f6800 if_delmulti_locked: detaching ifnet instance 0xfffffe00077f6800 pid 947 (ps), jid 0, uid 0: exited on signal 11 (core dumped) pid 932 (getty), jid 0, uid 0: exited on signal 11 (core dumped) pid 948 (sh), jid 0, uid 0: exited on signal 11 (core dumped) pid 931 (getty), jid 0, uid 0: exited on signal 11 (core dumped) pid 760 (csh), jid 0, uid 0: exited on signal 11 (core dumped) if_delmulti_locked: detaching ifnet instance 0xfffffe00077f6800 if_delmulti_locked: detaching ifnet instance 0xfffffe00077f6800 if_delmulti_locked: detaching ifnet instance 0xfffffe00077f6800 pid 942 (sh), jid 0, uid 0: exited on signal 11 (core dumped) pid 926 (getty), jid 0, uid 0: exited on signal 11 (core dumped) pid 924 (getty), jid 0, uid 0: exited on signal 11 (core dumped) pid 779 (sh), jid 0, uid 0: exited on signal 11 (core dumped) pid 930 (getty), jid 0, uid 0: exited on signal 11 (core dumped) set $lines = 0 if_delmulti_locked: detaching ifnet instance 0xfffffe00585aa800 if_delmulti_locked: detaching ifnet instance 0xfffffe00585aa800 if_delmulti_locked: detaching ifnet instance 0xfffffe00585aa800 Password:pid 946 (sh), jid 0, uid 0: exited on signal 11 (core dumped) pid 928 (getty), jid 0, uid 0: exited on signal 11 (core dumped) pid 927 (getty), jid 0, uid 0: exited on signal 11 (core dumped) pid 925 (getty), jid 0, uid 0: exited on signal 11 (core dumped) if_delmulti_locked: detaching ifnet instance 0xfffffe00585aa000 if_delmulti_locked: detaching ifnet instance 0xfffffe00585aa000 if_delmulti_locked: detaching ifnet instance 0xfffffe00585aa000 Login incorrect login: if_delmulti_locked: detaching ifnet instance 0xfffffe00585a9800 if_delmulti_locked: detaching ifnet instance 0xfffffe00585a9800 if_delmulti_locked: detaching ifnet instance 0xfffffe00585a9800 show registers Password: Login incorrect login: ps Password: Login incorrect login: show malloc Password: Login incorrect show all tcpcbs/bl